Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138362e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          D4VzrEOpFztpAaDWnz9kd9UEx1yQ5Q46uyH9Qld6lgc=
Subject key identifier:   33:96:67:74:D3:A6:BB:89:0B:A8:2D:76:BC:D7:E8:FE:03:88:AF:EF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       16A6BCF6604ABC41156327BA0740C63828684F3D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:35 +0000
ROA not before:           Wed 29 Sep 2021 23:55:35 +0000
ROA not after:            Fri 30 Sep 2022 00:00:35 +0000
asID:                     17451
IP address blocks:        112.78.186.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a6:bc:f6:60:4a:bc:41:15:63:27:ba:07:40:c6:38:28:68:4f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:35 2021 GMT
            Not After : Sep 30 00:00:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a3:68:e3:a2:ad:c8:49:0a:3c:96:6f:60:72:
                    19:10:4d:79:58:fe:b9:50:10:5d:eb:18:1e:41:4c:
                    08:88:4b:53:a1:19:92:31:9b:6f:cd:7a:84:40:99:
                    fb:52:8e:01:f6:ea:2a:08:77:55:fd:54:5f:11:c3:
                    f5:44:09:69:b6:7b:d9:b5:b4:9f:97:75:3e:35:c1:
                    20:3e:e0:fa:7e:33:fa:87:89:f5:24:4d:56:3b:e4:
                    76:ca:03:f8:c1:3a:f4:2d:ed:82:b0:e8:37:ad:62:
                    1b:5b:f2:1d:16:bf:8b:f3:f2:86:ba:80:dd:c2:01:
                    b7:cc:e4:5a:21:7d:cc:9a:6d:00:49:ed:61:19:f9:
                    2a:11:68:f5:5e:dd:d2:4f:a7:46:c0:cd:45:ac:4d:
                    2d:74:b6:16:f8:99:f8:c0:51:00:8f:1b:c6:70:cb:
                    8e:07:49:98:44:d5:4e:f8:27:a0:50:d5:cc:e8:7b:
                    2c:1e:d9:de:7d:3c:62:dc:80:1e:45:fc:f8:83:78:
                    ba:ec:3f:eb:e3:d8:ce:32:9d:97:2f:0d:e8:51:18:
                    20:62:8e:44:b4:1f:8f:31:c5:6e:9c:2c:95:3d:d7:
                    49:55:f2:e9:c7:1f:f7:2d:71:e3:af:2c:58:00:05:
                    83:94:4a:ee:6b:be:d0:09:ed:d5:3c:5c:c5:e9:39:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:96:67:74:D3:A6:BB:89:0B:A8:2D:76:BC:D7:E8:FE:03:88:AF:EF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:4c:63:67:4b:37:92:cf:23:b4:99:8b:af:d5:a6:e5:ae:9a:
         19:82:20:e9:1e:24:84:56:b9:83:d4:23:01:d8:94:44:bf:05:
         6d:c7:7b:d7:0e:7e:65:04:85:7f:b6:23:f2:3b:88:ec:fd:67:
         d0:fc:d0:93:e7:31:67:33:75:88:cc:22:73:2e:bb:69:25:27:
         e9:14:25:a6:b0:f7:8c:6e:e2:f4:9c:1e:aa:c8:d3:c7:26:b4:
         d1:38:52:70:ee:c0:0c:cd:80:8d:b3:7b:99:21:5f:d2:12:b4:
         36:80:51:78:96:58:99:cb:0b:3b:6d:c6:95:dc:0d:55:74:8f:
         6e:61:86:8f:06:67:02:fd:bc:94:8d:e8:3c:62:a3:4d:a8:b8:
         e5:43:04:b3:df:86:52:49:4d:2b:a3:85:ef:a9:4c:86:c9:68:
         37:ed:44:80:04:1f:c1:60:51:d6:57:f2:60:a7:ff:43:6d:b4:
         86:d2:3b:64:49:3b:e2:07:82:b4:13:f6:4b:9a:24:ca:29:6e:
         24:db:28:2a:3f:c4:74:f2:01:37:d5:1f:35:7a:e8:a9:a5:13:
         3f:1c:d6:8d:23:0e:b6:5d:13:0f:bf:fc:f8:4e:25:c3:8b:e1:
         ca:42:9f:28:11:19:fb:82:14:ba:3f:50:fb:d5:f6:55:0c:13:
         65:4b:e1:3f
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUFqa89mBKvEEVYye6B0DGOChoTz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MzVaFw0yMjA5MzAwMDAwMzVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDZBMzY4RTNBMkFEQzg0OTBB
M0M5NjZGNjA3MjE5MTA0RDc5NThGRUI5NTAxMDVERUIxODFFNDE0QzA4ODg0QjUz
QTExOTkyMzE5QjZGQ0Q3QTg0NDA5OUZCNTI4RTAxRjZFQTJBMDg3NzU1RkQ1NDVG
MTFDM0Y1NDQwOTY5QjY3QkQ5QjVCNDlGOTc3NTNFMzVDMTIwM0VFMEZBN0UzM0ZB
ODc4OUY1MjQ0RDU2M0JFNDc2Q0EwM0Y4QzEzQUY0MkRFRDgyQjBFODM3QUQ2MjFC
NUJGMjFEMTZCRjhCRjNGMjg2QkE4MEREQzIwMUI3Q0NFNDVBMjE3RENDOUE2RDAw
NDlFRDYxMTlGOTJBMTE2OEY1NUVEREQyNEZBNzQ2QzBDRDQ1QUM0RDJENzRCNjE2
Rjg5OUY4QzA1MTAwOEYxQkM2NzBDQjhFMDc0OTk4NDRENTRFRjgyN0EwNTBENUND
RTg3QjJDMUVEOURFN0QzQzYyREM4MDFFNDVGQ0Y4ODM3OEJBRUMzRkVCRTNEOENF
MzI5RDk3MkYwREU4NTExODIwNjI4RTQ0QjQxRjhGMzFDNTZFOUMyQzk1M0RENzQ5
NTVGMkU5QzcxRkY3MkQ3MUUzQUYyQzU4MDAwNTgzOTQ0QUVFNkJCRUQwMDlFREQ1
M0M1Q0M1RTkzOUVBRjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1qNo46KtyEkKPJZvYHIZEE15WP65UBBd6xgeQUwIiEtToRmSMZtv
zXqEQJn7Uo4B9uoqCHdV/VRfEcP1RAlptnvZtbSfl3U+NcEgPuD6fjP6h4n1JE1W
O+R2ygP4wTr0Le2CsOg3rWIbW/IdFr+L8/KGuoDdwgG3zORaIX3Mmm0ASe1hGfkq
EWj1Xt3ST6dGwM1FrE0tdLYW+Jn4wFEAjxvGcMuOB0mYRNVO+CegUNXM6HssHtne
fTxi3IAeRfz4g3i67D/r49jOMp2XLw3oURggYo5EtB+PMcVunCyVPddJVfLpxx/3
LXHjryxYAAWDlErua77QCe3VPFzF6Tnq9QIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FDOWZ3TTpruJC6gtdrzX6P4DiK/vMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwTrowDQYJKoZIhvcNAQELBQADggEBABZMY2dLN5LP
I7SZi6/VpuWumhmCIOkeJIRWuYPUIwHYlES/BW3He9cOfmUEhX+2I/I7iOz9Z9D8
0JPnMWczdYjMInMuu2klJ+kUJaaw94xu4vScHqrI08cmtNE4UnDuwAzNgI2ze5kh
X9IStDaAUXiWWJnLCzttxpXcDVV0j25hho8GZwL9vJSN6Dxio02ouOVDBLPfhlJJ
TSujhe+pTIbJaDftRIAEH8FgUdZX8mCn/0NttIbSO2RJO+IHgrQT9kuaJMopbiTb
KCo/xHTyATfVHzV66KmlEz8c1o0jDrZdEw+//PhOJcOL4cpCnygRGfuCFLo/UPvV
9lUME2VL4T8=
-----END CERTIFICATE-----